OS X上的Java Web Start应用程序的身份不明的开发人员 [英] Unidentified developer for Java Web Start application on OS X

问题描述

在Mac OS X 10.9上签名的Java Web Start应用程序默认被阻止，并显示以下消息：

On Mac OS X 10.9 signed Java Web Start applications are blocked by default with the message:

"application.jnlp" can't be opened because it is from an unidentified developer.

我知道可以削弱安全检查以允许任何应用程序运行，但这需要最终用户的手动干预。

I know it's possible to weaken the security checks to allow any application to run, but that requires a manual intervention of the end user.

是否可以签署Java Web Start应用程序，使其被识别为来自已识别的开发人员？

Is it possible to "sign" a Java Web Start application such that it is recognized as originating from an identified developer?

谢谢

推荐答案

Apple确实似乎支持webstart的签名 - 但不是直接签名。您必须将其捆绑在存档中。请参阅此页面底部的注释：

Apple does appear to support signing of webstart -- but not directly. You have to bundle it in an archive. See the note at the bottom of this page:

您可以使用codesign实用程序对JNLP文件进行签名，该文件将代码签名作为扩展属性附加到JNLP文件。要保留这些属性，请将JNLP文件打包为ZIP，XIP或DMG文件。请小心使用ZIP格式，因为某些第三方工具可能无法正确捕获所需的扩展属性。

You can use the codesign utility to sign the JNLP file, which will attach the code signature to the JNLP file as extended attributes. To preserve these attributes, package the JNLP file in a ZIP, XIP, or DMG file. Be careful using the ZIP format, as some third-party tools might not capture the required extended attributes correctly.

另请注意，XIP不是不支持非Apple开发人员再次：

Also note that XIP isn't supported for non-Apple developers anymore:

重要提示：从macOS Sierra开始，只有Apple签署的XIP档案才会被扩展。使用XIP存档的开发人员需要使用已签名的安装程序包或磁盘映像。

Important: Starting with macOS Sierra, only XIP archives signed by Apple will be expanded. Developers who have been using XIP archives will need to move to using signed installer packages or disk images.

这篇关于OS X上的Java Web Start应用程序的身份不明的开发人员的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！